$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa File: 4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa (raw, json) Hash identifier: 0huMH9ZpLn6EpFHHj0AkCxc0kXVR6AoSCaZMkEgsTK4= Subject key identifier: 56:52:70:EE:C1:52:E4:B3:C5:9E:18:89:FF:DD:F4:29:43:76:17:C6 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B87B21BCB3F17316609E23250 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 134365 IP address blocks: 198.44.172.0/23 maxlen: 23 198.44.172.0/24 maxlen: 24 198.44.173.0/24 maxlen: 24 198.44.174.0/23 maxlen: 23 198.44.174.0/24 maxlen: 24 198.44.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1b:cb:3f:17:31:66:09:e2:32:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=84bfb7cb-1dca-4428-b731-c4a639c5deb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:01:51:23:b0:1d:20:39:fb:28:79:9e:00: ab:12:f1:cd:ae:a3:56:ee:60:12:76:6d:a9:89:bf: 1c:4c:80:20:89:26:a2:c6:f1:3b:32:f8:ad:9f:4d: 59:49:1f:10:e6:af:ab:f7:90:e6:05:e3:d0:1c:2c: 6c:e0:e2:85:e0:40:bc:a4:d3:07:06:1e:96:35:56: c2:20:81:cc:97:08:5e:9d:53:cb:de:72:0e:6c:c4: 1b:d1:09:92:88:c2:d2:66:90:5b:cc:df:5d:de:ea: 47:92:4f:fa:8d:5e:e0:68:67:fa:b5:8a:32:09:02: 33:05:37:1e:6f:f0:26:e0:2c:8f:82:6e:fc:75:be: d7:42:5e:19:e5:1e:66:8e:0b:ee:4e:fa:d2:bf:33: 5c:ce:84:1a:00:6f:7d:28:dd:81:1d:f3:b4:a1:95: e0:e1:b3:61:e0:bf:bc:d6:3b:21:3c:39:f3:89:aa: aa:45:90:f5:b6:f9:ad:03:55:32:7e:3a:36:7b:27: 2f:1d:86:dd:26:b4:7c:7a:e9:1d:61:57:31:58:0f: 72:9f:95:b2:90:d2:b0:54:cd:2d:1d:67:6e:b1:d1: 80:83:aa:de:8a:f2:eb:cf:86:e5:3d:c8:8a:05:52: eb:53:ad:6c:28:3e:91:15:09:bc:e1:84:ec:97:0f: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:52:70:EE:C1:52:E4:B3:C5:9E:18:89:FF:DD:F4:29:43:76:17:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:05:4d:b2:6c:a9:a9:17:e0:55:ff:b5:1d:be:69:69:da:9d: 35:2b:1a:24:a2:4c:68:5b:c6:06:22:87:bc:fc:c7:95:39:18: 7f:ec:1c:72:a7:b1:b8:be:d4:9a:89:a7:c6:5b:35:24:10:ab: cd:fa:04:cd:ca:6c:77:8a:41:eb:79:e9:70:cc:b9:d6:19:f6: 09:7e:b6:0e:6b:ed:4e:e7:b7:1f:5f:23:a7:e2:a2:c0:05:f7: 9f:e2:c3:33:7d:52:ff:62:2b:a5:1c:a0:fa:98:cd:d7:04:59: b3:43:f1:11:7f:51:da:7b:ba:a7:63:5c:eb:f9:82:db:1d:2b: 66:c1:41:ed:09:33:c0:83:35:10:99:3d:fa:38:d3:4a:03:3a: c5:88:e7:10:31:9e:01:23:e6:fa:bf:2a:93:87:48:5d:5b:c7: 8e:a9:63:48:63:9f:15:59:d9:c4:4e:11:5b:d7:d5:bd:95:a3: 04:3f:2e:df:c9:a1:24:82:45:59:36:1a:7f:0e:40:db:5a:e2: d8:ed:38:0a:01:10:35:21:63:e0:12:b5:1c:6d:56:71:60:05: 5a:b1:e0:59:9b:4a:48:9a:fb:5e:c6:26:0d:e6:f9:2c:cb:43: 21:d5:b7:e9:60:85:15:d9:c0:83:19:a0:f1:02:f2:05:04:3e: 0c:ae:60:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHshvLPxcxZgniMlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ODRiZmI3Y2ItMWRjYS00NDI4LWI3MzEtYzRhNjM5YzVkZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiQBUSOwHSA5+yh5ngCrEvHNrqNW7mASdm2p ib8cTIAgiSaixvE7Mvitn01ZSR8Q5q+r95DmBePQHCxs4OKF4EC8pNMHBh6WNVbC IIHMlwhenVPL3nIObMQb0QmSiMLSZpBbzN9d3upHkk/6jV7gaGf6tYoyCQIzBTce b/Am4CyPgm78db7XQl4Z5R5mjgvuTvrSvzNczoQaAG99KN2BHfO0oZXg4bNh4L+8 1jshPDnziaqqRZD1tvmtA1Uyfjo2eycvHYbdJrR8eukdYVcxWA9yn5WykNKwVM0t HWdusdGAg6reivLrz4blPciKBVLrU61sKD6RFQm84YTslw8GZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZScO7BUuSzxZ4Yif/d9ClDdhfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGQ5OGE4MDUtYWJlZC0z N2Y4LWEzYzItNGIzZWY0ZjZmN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEFTbJsqakX4FX/tR2+aWnanTUrGiSiTGhbxgYih7z8x5U5GH/sHHKn sbi+1JqJp8ZbNSQQq836BM3KbHeKQet56XDMudYZ9gl+tg5r7U7ntx9fI6fiosAF 95/iwzN9Uv9iK6UcoPqYzdcEWbND8RF/Udp7uqdjXOv5gtsdK2bBQe0JM8CDNRCZ Pfo400oDOsWI5xAxngEj5vq/KpOHSF1bx46pY0hjnxVZ2cROEVvX1b2VowQ/Lt/J oSSCRVk2Gn8OQNta4tjtOAoBEDUhY+AStRxtVnFgBVqx4FmbSkia+17GJg3m+SzL QyHVt+lghRXZwIMZoPEC8gUEPgyuYMk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:48:23 2025 by rpki-client